$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa File: da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa (raw, json) Hash identifier: t85y7A6CIKf7yxCRrw3CbYsBXOvwfley8kAM+bbds44= Subject key identifier: ED:76:21:6F:57:3C:AB:15:F8:F4:F8:AD:C8:55:2E:24:6A:19:27:08 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1BB60B56BC339FA3DA9F7B9 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa Signing time: Thu 24 Apr 2025 11:16:31 +0000 ROA not before: Thu 24 Apr 2025 11:16:31 +0000 ROA not after: Wed 23 Jul 2025 11:16:31 +0000 asID: 12041 IP address blocks: 161.232.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:bb:60:b5:6b:c3:39:fa:3d:a9:f7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:16:31 2025 GMT Not After : Jul 23 11:16:31 2025 GMT Subject: CN=07f88cf6-7510-4c8f-a48b-572ac1daf302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:f1:b1:ea:bd:31:e3:c3:38:e2:8e:d0:47: 8b:e4:26:cf:81:0b:ea:a8:9e:52:46:a4:18:70:e0: f2:2a:f1:c8:70:e1:61:4d:ed:af:e4:1f:c6:83:d2: 18:44:47:ec:53:b1:4b:51:56:5f:8b:b2:f0:af:c7: 0d:3f:5d:a6:d4:d5:91:e1:02:ed:02:77:ce:b0:a3: 04:94:ff:52:ec:7c:af:71:6b:0a:bc:cd:5c:c6:40: 45:29:81:4b:44:72:dc:31:f0:e3:98:d5:38:d1:84: 45:19:58:21:c8:ba:4d:55:d6:8f:cc:3d:e5:46:91: 8f:a4:e3:6f:ce:51:64:83:4c:2c:aa:0b:9d:6d:de: f2:3f:31:95:3c:19:09:ca:76:63:b3:fd:e3:bd:d3: dd:ee:17:cd:97:00:14:e7:f3:a5:88:f3:12:37:e2: 1c:7f:7f:18:8a:25:a0:39:be:25:89:9e:40:ca:b0: 85:49:7d:55:4f:74:1f:3a:ac:01:0e:a3:95:02:8d: af:6b:bb:c9:95:ed:c7:75:c8:37:2a:5f:a9:7d:66: 92:a0:4f:d5:f3:ff:cd:2f:c3:02:73:85:b9:61:46: a4:3f:46:26:db:45:35:e3:9f:d5:8a:2f:0b:36:6c: 2e:b1:3e:dd:a0:28:4c:7c:ac:b1:5e:70:92:72:95: e5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:76:21:6F:57:3C:AB:15:F8:F4:F8:AD:C8:55:2E:24:6A:19:27:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/da4014a9-9ab0-3ab7-a27d-48a3c39f94d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f4:a7:5d:00:02:a9:71:e7:80:f3:6d:47:02:7d:51:13:38: 63:c2:3c:a1:a0:e0:fb:ba:fb:59:06:6d:a1:de:a0:cf:b5:fb: 31:ae:30:d3:c7:85:84:74:62:0d:2f:59:03:31:b3:9e:4e:cf: 3f:cc:6e:d5:ec:87:fc:f3:1f:4c:1c:82:95:69:cc:6c:64:3e: 7f:7d:ef:e5:73:69:39:0b:47:c8:e1:52:29:8d:65:4a:75:b4: ab:5f:7d:6a:8b:2d:1e:8d:cd:7a:45:f1:43:85:32:b2:8e:86: 99:ab:dd:f6:4a:c9:be:36:0e:d5:0c:89:8f:80:98:54:69:1f: 8f:d6:05:9c:32:4c:82:86:a8:f6:2f:76:8a:e4:8f:6d:f4:ba: 4a:b0:9e:c9:66:50:08:6e:59:71:b9:f5:ca:34:a4:72:f8:be: 00:55:18:70:7d:32:1d:2d:c2:57:d6:af:fb:78:83:cf:d5:09: 10:55:b0:e0:33:24:65:c8:03:9b:02:64:aa:c9:ce:21:dd:75: 7f:af:12:bc:ad:4e:57:ef:36:d7:28:55:04:57:4f:83:11:c0: 48:22:2d:9f:1d:a7:e6:c3:d4:ff:5e:79:c3:b5:e3:bf:0e:b1: bb:08:fd:16:db:19:eb:20:09:af:4f:a9:b3:94:fa:1e:f8:e5: 2b:73:22:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu2C1a8M5+j2p97kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMTYzMVoXDTI1MDcyMzExMTYzMVowLzEtMCsGA1UEAxMk MDdmODhjZjYtNzUxMC00YzhmLWE0OGItNTcyYWMxZGFmMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwLxseq9MePDOOKO0EeL5CbPgQvqqJ5SRqQY cODyKvHIcOFhTe2v5B/Gg9IYREfsU7FLUVZfi7Lwr8cNP12m1NWR4QLtAnfOsKME lP9S7HyvcWsKvM1cxkBFKYFLRHLcMfDjmNU40YRFGVghyLpNVdaPzD3lRpGPpONv zlFkg0wsqgudbd7yPzGVPBkJynZjs/3jvdPd7hfNlwAU5/OliPMSN+Icf38YiiWg Ob4liZ5AyrCFSX1VT3QfOqwBDqOVAo2va7vJle3Hdcg3Kl+pfWaSoE/V8//NL8MC c4W5YUakP0Ym20U145/Vii8LNmwusT7doChMfKyxXnCScpXlxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO12IW9XPKsV+PT4rchVLiRqGScIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZGE0MDE0YTktOWFiMC0z YWI3LWEyN2QtNDhhM2MzOWY5NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoeghMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT0p10AAqlx54DzbUcCfVETOGPCPKGg4Pu6+1kGbaHeoM+1+zGuMNPH hYR0Yg0vWQMxs55Ozz/MbtXsh/zzH0wcgpVpzGxkPn997+VzaTkLR8jhUimNZUp1 tKtffWqLLR6NzXpF8UOFMrKOhpmr3fZKyb42DtUMiY+AmFRpH4/WBZwyTIKGqPYv dorkj230ukqwnslmUAhuWXG59co0pHL4vgBVGHB9Mh0twlfWr/t4g8/VCRBVsOAz JGXIA5sCZKrJziHddX+vErytTlfvNtcoVQRXT4MRwEgiLZ8dp+bD1P9eecO1478O sbsI/RbbGesgCa9PqbOU+h745StzIv4= -----END CERTIFICATE-----Generated at Tue Apr 29 10:01:39 2025 by rpki-client